nerdexam
GIAC

GSLC · Question #86

Internet Protocol Security (IPSec) provides data protection during network communication. Which of the following tasks can be performed by IPSec? Each correct answer represents a complete solution…

The correct answer is A. Ensures the integrity of the IP data. B. Authenticates the sender of IP data. C. Encrypts all data for full confidentiality. IPSec provides data integrity, sender authentication, and confidentiality through its AH and ESP protocols, but it does not have a feature to display originating IP addresses.

Security Architecture & Engineering

Question

Internet Protocol Security (IPSec) provides data protection during network communication. Which of the following tasks can be performed by IPSec? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AEnsures the integrity of the IP data.
  • BAuthenticates the sender of IP data.
  • CEncrypts all data for full confidentiality.
  • DDisplays the originating IP addresses.

How the community answered

(16 responses)
  • A
    88% (14)
  • D
    13% (2)

Why each option

IPSec provides data integrity, sender authentication, and confidentiality through its AH and ESP protocols, but it does not have a feature to display originating IP addresses.

AEnsures the integrity of the IP data.Correct

IPSec uses the Authentication Header (AH) protocol to compute a cryptographic hash over the IP packet, allowing the receiver to detect any modification in transit and thereby ensuring data integrity.

BAuthenticates the sender of IP data.Correct

IPSec authenticates the identity of communicating parties using digital certificates or pre-shared keys, verifying that packets originate from a trusted and legitimate sender.

CEncrypts all data for full confidentiality.Correct

IPSec's Encapsulating Security Payload (ESP) protocol encrypts the packet payload using symmetric encryption algorithms such as AES, providing full confidentiality for data in transit.

DDisplays the originating IP addresses.

Displaying originating IP addresses is a basic function of IP routing visible in standard packet headers and is not a security service offered by IPSec; in tunnel mode, IPSec can actually obscure original addresses.

Concept tested: IPSec security services - integrity, authentication, and encryption

Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/ipsec/ipsec-overview

Topics

#IPSec#network encryption#data integrity#authentication

Community Discussion

No community discussion yet for this question.

Full GSLC Practice